3 ms·
> Zero reads credentials from environment variables. Zero also loads variables from .env file in your project root, if it's present. Security nightmare? Can I
by miki123211 8y ago
> Zero reads credentials from environment variables. Zero also loads variables from .env file in your project root, if it's present.
Security nightmare? Can I do myapp.com/.env and read the credentials from the wider internet?
- chickenfries 8y agoWhy would you assume that they have this bug? If you’re actually curious if the bug exists go read the code or try it yourself.
- ozten 8y agoAnother common on this page documents this bug on their production website.